<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->


<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="zh-cn" xml:lang="zh-cn">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="管理侦测模型">
<meta name="product" content="">
<meta name="DC.Relation" scheme="URI" content="zh-cn_topic_0000001821100600.html">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="00-OceanCyber 300 1.1.0 联机帮助">
<meta name="DC.Publisher" content="20241203">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="ZH-CN_TOPIC_0000001829899789">
<meta name="DC.Language" content="zh-cn">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>管理侦测模型</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="ZH-CN_TOPIC_0000001829899789"></a><a name="ZH-CN_TOPIC_0000001829899789"></a>

<h1 class="topictitle1">管理侦测模型</h1>
<div id="body0000001693542549"><p id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_p104720449482">勒索病毒防护通过侦测模型来管理特征库，支持查看、更新、激活或删除侦测模型。</p>
<p id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_p196680179489">您需要登录OceanCyber，选择“<span id="ZH-CN_TOPIC_0000001829899789__text7537163117211">数据安全</span> &gt; <span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol8651184012222">“侦测模型”</span>”，查找到需要执行操作的侦测模型。具体操作说明如<a href="#ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_table1882741584910">表1</a>所示。</p>

<div class="tablenoborder"><a name="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_table1882741584910"></a><a name="zh-cn_topic_0000001282854464_table1882741584910"></a><table cellpadding="4" cellspacing="0" summary="" id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_table1882741584910" frame="border" border="1" rules="all"><caption><b>表1 </b>侦测模型相关操作</caption><colgroup><col style="width:16.580000000000002%"><col style="width:50.080000000000005%"><col style="width:33.33%"></colgroup><thead align="left"><tr id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_row1182701564912"><th align="left" class="cellrowborder" valign="top" width="16.58165816581658%" id="mcps1.3.3.2.4.1.1"><p id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_p1682771514910">任务</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50.085008500850094%" id="mcps1.3.3.2.4.1.2"><p id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_p1482781519493">任务描述</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.3.2.4.1.3"><p id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_p18827141544910">界面入口</p>
</th>
</tr>
</thead>
<tbody><tr id="ZH-CN_TOPIC_0000001829899789__row1393915253598"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="ZH-CN_TOPIC_0000001829899789__p1333814283476">查看侦测模型</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001090712911_p910714592398"><strong id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001090712911_b722315495463">操作背景</strong></p>
<p id="ZH-CN_TOPIC_0000001829899789__p433882815471">通过查看侦测模型，可以了解侦测模型的基本信息和激活状态。</p>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="ZH-CN_TOPIC_0000001829899789__p8152156125317">在侦测模型列表中，查看检测模型的版本、导入时间、签名信息、描述和激活状态。</p>
</td>
</tr>
<tr id="ZH-CN_TOPIC_0000001829899789__row1844327195911"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="ZH-CN_TOPIC_0000001829899789__p768154414011">更新侦测模型</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="ZH-CN_TOPIC_0000001829899789__p368104410015"><strong id="ZH-CN_TOPIC_0000001829899789__b11211355206">操作背景</strong></p>
<p id="ZH-CN_TOPIC_0000001829899789__p17916826488">系统预置了软件版本发布时最新的侦测模型。</p>
<p id="ZH-CN_TOPIC_0000001829899789__p87221727387">如果OceanCyber发布了最新版本的侦测模型，可以导入最新的侦测模型。</p>
<ul id="ZH-CN_TOPIC_0000001829899789__ul174664912"><li id="ZH-CN_TOPIC_0000001829899789__li1741169912">自行查询侦测模型更新信息。您可以登录以下地址查询侦测模型是否有更新：<ul id="ZH-CN_TOPIC_0000001829899789__ul5101656131015"><li id="ZH-CN_TOPIC_0000001829899789__li138493532106">企业网：<a href="https://support.huawei.com/enterprise/zh/flash-storage/oceancyber-300-pid-258177619/software" target="_blank" rel="noopener noreferrer">点此前往</a></li><li id="ZH-CN_TOPIC_0000001829899789__li14987105881012">运营商网站：<a href="https://support.huawei.com/carrier/productNewOffering?col=product&amp;path=PBI1-21430725/PBI1-251363742/PBI1-261607562/PBI1-261914692/PBI1-258177619&amp;resTab=SW" target="_blank" rel="noopener noreferrer">点此前往</a></li></ul>
</li><li id="ZH-CN_TOPIC_0000001829899789__li7469637103716">自动获取侦测模型更新信息。现网需要部署DME IQ Client，同时对接OceanCyber 300 安全一体机。<ol id="ZH-CN_TOPIC_0000001829899789__ol1868163533815"><li id="ZH-CN_TOPIC_0000001829899789__li20681535143819">在DME IQ（24.0.0及以上版本）上添加OceanCyber 300 安全一体机设备。添加设备操作请参见<a href="https://support.huawei.com/enterprise/zh/flash-storage/dme-iq-pid-256404359?category=operation-maintenance&amp;subcategory=user-guide" target="_blank" rel="noopener noreferrer">《DME IQ Client 24.0.x 用户指南》</a>中的<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol197354194116">“添加设备”</span>章节。</li><li id="ZH-CN_TOPIC_0000001829899789__li18488220114218">如果OceanCyber发布了高于当前安全一体机模型列表中最大版本的侦测模型，且适配当前安全一体机，用户将会收到相应邮件通知，可以在邮件中的下载地址获取新版本的侦测模型。</li></ol>
</li></ul>
<div class="note" id="ZH-CN_TOPIC_0000001829899789__note1438885061311"><span class="notetitle"> 说明： </span><div class="notebody"><ul id="ZH-CN_TOPIC_0000001829899789__ul8706192894710"><li id="ZH-CN_TOPIC_0000001829899789__li1170619287472">如果未安装DME IQ，可以从以下地址获取：<ul id="ZH-CN_TOPIC_0000001829899789__ul15755841114715"><li id="ZH-CN_TOPIC_0000001829899789__li9333183913474">企业网：<a href="https://support.huawei.com/enterprise/zh/flash-storage/dme-iq-pid-256404359/software" target="_blank" rel="noopener noreferrer">点此前往</a></li><li id="ZH-CN_TOPIC_0000001829899789__li4505544114713">运营商网站：<a href="https://support.huawei.com/carrier/productNewOffering?col=product&amp;resTab=SW&amp;path=PBI1-21430725/PBI1-251363742/PBI1-21499296/PBI1-256404359&amp;lang=zh" target="_blank" rel="noopener noreferrer">点此前往</a></li></ul>
</li></ul>
<ul id="ZH-CN_TOPIC_0000001829899789__ul1414123134712"><li id="ZH-CN_TOPIC_0000001829899789__li2414133164719">如果针对特定场景，使用旧版本模型准确率更高，可以导入或重新激活旧版本的侦测模型。</li></ul>
</div></div>
<p id="ZH-CN_TOPIC_0000001829899789__p23134321316"><strong id="ZH-CN_TOPIC_0000001829899789__b13313183218115">注意事项</strong></p>
<ul id="ZH-CN_TOPIC_0000001829899789__ul1183915572"><li id="ZH-CN_TOPIC_0000001829899789__li88892571">侦测模型导入后，将自动激活。此前已激活的侦测模型变为<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol360143913165">“未激活”</span>状态。</li><li id="ZH-CN_TOPIC_0000001829899789__li6437810155712">侦测模型导入不影响正在侦测的任务。正在执行的侦测任务仍然使用此前激活的侦测模型，下次任务时会使用新的侦测模型。</li></ul>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="ZH-CN_TOPIC_0000001829899789__p16814418016">在<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol185621112112320">“侦测模型”</span>页面，单击<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol6405439133816">“<span id="ZH-CN_TOPIC_0000001829899789__text165620316203">添加</span>”</span>。</p>
</td>
</tr>
<tr id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_row982731512494"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="ZH-CN_TOPIC_0000001829899789__p143381328104711">激活侦测模型</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="ZH-CN_TOPIC_0000001829899789__p1083672062810"><strong id="ZH-CN_TOPIC_0000001829899789__b198854234287">操作背景</strong></p>
<p id="ZH-CN_TOPIC_0000001829899789__p0338182819471">如果需要使用当前未激活的侦测模型执行侦测，请激活侦测模型。</p>
<p id="ZH-CN_TOPIC_0000001829899789__p13941716182813"><strong id="ZH-CN_TOPIC_0000001829899789__b17112711101317">注意事项</strong></p>
<ul id="ZH-CN_TOPIC_0000001829899789__ul0646193882817"><li id="ZH-CN_TOPIC_0000001829899789__li4646838202815">仅支持激活处于<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol134191541152816">“<span id="ZH-CN_TOPIC_0000001829899789__text18165165319227">未激活</span>”</span>状态的侦测模型。</li><li id="ZH-CN_TOPIC_0000001829899789__li147176574281">系统中只有一个侦测模型的状态为<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol2521458102812">“<span id="ZH-CN_TOPIC_0000001829899789__text36203552310">已激活</span>”</span>。激活新的侦测模型或者导入新的侦测模型后，此前已激活的侦测模型将自动去激活。</li><li id="ZH-CN_TOPIC_0000001829899789__li492625218">如果正在使用此前激活的侦测模型执行防勒索软件侦测，激活新的侦测模型或者导入新的侦测模型后，新的侦测模型状态置为<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol131121011295">“<span id="ZH-CN_TOPIC_0000001829899789__text162141684233">已激活</span>”</span>，但正在执行的侦测任务仍然使用此前激活的模型，下次任务时会使用新的模型。</li></ul>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="ZH-CN_TOPIC_0000001829899789__p8338142854714">在侦测模型的所在行右侧“<span id="ZH-CN_TOPIC_0000001829899789__text736715017589">操作</span>”列，单击“<span id="ZH-CN_TOPIC_0000001829899789__text836715010589">更多</span> &gt; <span id="ZH-CN_TOPIC_0000001829899789__text3505811103217">激活</span>”。</p>
</td>
</tr>
<tr id="ZH-CN_TOPIC_0000001829899789__zh-cn_topic_0000001282854464_row582713153493"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="ZH-CN_TOPIC_0000001829899789__p1533815280472">删除侦测模型</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="ZH-CN_TOPIC_0000001829899789__p16470103092910"><strong id="ZH-CN_TOPIC_0000001829899789__b26498333296">操作背景</strong></p>
<p id="ZH-CN_TOPIC_0000001829899789__p19631914115414">如果不再需要使用某个侦测模型执行勒索软件侦测，可以删除该侦测模型。</p>
<p id="ZH-CN_TOPIC_0000001829899789__p543117398294"><strong id="ZH-CN_TOPIC_0000001829899789__b5431103916292">注意事项</strong></p>
<p id="ZH-CN_TOPIC_0000001829899789__p18423114017299">仅支持删除处于<span class="uicontrol" id="ZH-CN_TOPIC_0000001829899789__uicontrol074344816294">“<span id="ZH-CN_TOPIC_0000001829899789__text16678205619225">未激活</span>”</span>状态的侦测模型。</p>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="ZH-CN_TOPIC_0000001829899789__p333982814471">在侦测模型的所在行右侧“<span id="ZH-CN_TOPIC_0000001829899789__text1939752455419">操作</span>”列，单击“<span id="ZH-CN_TOPIC_0000001829899789__text153978244548">更多</span> &gt; <span id="ZH-CN_TOPIC_0000001829899789__text75651429153216">删除</span>”。</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>父主题：</strong> <a href="zh-cn_topic_0000001821100600.html">管理勒索病毒防护</a></div>
</div>
</div>

<div class="hrcopyright"><hr size="2"></div><div class="hwcopyright">版权所有 &copy; 华为技术有限公司</div></body>
</html>